Chorus: a Programming Framework for Building Scalable Differential Privacy Mechanisms
arXiv:1809.07750 · doi:10.1109/EuroSP48549.2020.00041
Abstract
Differential privacy is fast becoming the gold standard in enabling statistical analysis of data while protecting the privacy of individuals. However, practical use of differential privacy still lags behind research progress because research prototypes cannot satisfy the scalability requirements of production deployments. To address this challenge, we present Chorus, a framework for building scalable differential privacy mechanisms which is based on cooperation between the mechanism itself and a high-performance production database management system (DBMS). We demonstrate the use of Chorus to build the first highly scalable implementations of complex mechanisms like Weighted PINQ, MWEM, and the matrix mechanism. We report on our experience deploying Chorus at Uber, and evaluate its scalability on real-world queries.
References in corpus (10)
- RAPPOR: Randomized Aggregatable Privacy-Preserving Ordinal Response
- Renyi Differential Privacy
- Proving Differential Privacy via Probabilistic Couplings
- Optimizing error of high-dimensional statistical queries under differential privacy
- LightDP: Towards Automating Differential Privacy Proofs
- Proving differential privacy in Hoare logic
- Proving Differential Privacy with Shadow Execution
- Synthesizing Coupling Proofs of Differential Privacy
- Approximate Span Liftings
- Strong and Provably Secure Database Access Control